updated password reset tokens to expire after 5 minutes